Method and circuit arrangement in an electronic control unit of a motor vehicle for detecting faults

• US 9,174,651 B2
• Filed: 07/31/2014
• Issued: 11/03/2015
• Est. Priority Date: 02/03/2012
• Status: Active Grant

• Current Assignee: Bayerische Motoren Werke AG
• Original Assignee: Bayerische Motoren Werke AG
• Inventors: Moellmann, Joerg
• Primary Examiner(s): Cheung, Mary
• Assistant Examiner(s): WONG, YUEN H
• Application Number:
  US14/448,392
• Publication Number:
  US 20140343817A1
• Time in Patent Office: 460 Days
• Field of Search: 701/70
• US Class Current: 1/1
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 2050/021 Means for detecting failure or malfunction
• CPC Class Codes: B60W 2520/28 Wheel speed
• CPC Class Codes: B60W 2540/10 Accelerator pedal position
• CPC Class Codes: B60W 50/0205 Diagnosing or detecting failures; Failure detection models

Abstract

In the case of a circuit arrangement in an electronic control unit of a motor vehicle for the detection of faults in an electronically controlled drive system, which is structured in at least two levels, a first function-controlling level and a second monitoring level, both levels acquire at least the accelerator pedal position as an input signal. The first level has a driver intention determination block for determining a quantity proportional to the desired longitudinal acceleration. The first level transmits this quantity as an input signal to a plausibility block of the second level. The plausibility block has at least one fault detection program, by which a fault can be detected when a defined correct relationship does not exist for a specified time period between the accelerator pedal position and/or the accelerator pedal position change with respect to the determined quantity proportional to the desired longitudinal acceleration—and this relationship is therefore implausible.

Claims

1. An arrangement for detecting faults in an electronically controlled drive system of a motor vehicle, comprising:

an electronic control unit for controlling a drive function of the motor vehicle, the electronic control unit having a first function-controlling level and a second monitoring level, wherein

both the first function-controlling level and second monitoring level of the electronic control unit acquire at least an accelerator pedal position as an input signal,

the first function-controlling level of the electronic control unit determines a quantity proportional to a desired longitudinal acceleration and transmits the determined quantity as an input signal to a plausibility block of the second level of the electronic control unit,

the plausibility block of the second level of the electronic control unit implements at least one fault detection program to detect a fault when a defined relationship is not satisfied between the accelerator pedal position and/or an accelerator pedal position change and the determined quantity proportional to the desired longitudinal acceleration,

when no fault is detected, the drive function is implemented, and

when a fault is detected, an emergency operation of the drive function is implemented by the electronic control unit, or the electronic control unit is switched off completely.

2. The arrangement according to claim 1, wherein

the plausibility block has a first fault detection program, by which the fault is detected when a defined desired longitudinal acceleration gradient (Δ

M<sub>Rad—

soll</sub>/Δ

t or Δ

a<sub>Fzg—

soll</sub>/Δ

t) dependent on the accelerator pedal position change (Δ

α

_FP/Δ

t) is exceeded for a specified time period.

3. The arrangement according to claim 2, wherein

the defined desired longitudinal acceleration gradient (Δ

a<sub>Fzg—

soll</sub>/Δ

t) dependent on the accelerator pedal position change (Δ

α

_FP/Δ

t) is limited by a maximal slope ([Δ

a<sub>Fzg—

soll</sub>/Δ

α

_FP]_max) of a characteristic curve of an actual function of the first level, wherein the desired longitudinal acceleration (a<sub>Fzg—

soll</sub>) is specified by the maximal slope as a function of the accelerator pedal position (Δ

_FP).

4. The arrangement according to claim 3, wherein

when the accelerator pedal is not actuated (α

_FP=0), a second fault detection program of the plausibility block of the second level of the electronic control unit is implemented by which the fault is detected when a defined desired longitudinal acceleration threshold value (a<sub>Fzg—

soll—

grenz</sub>=f(v_Fzg)) is exceeded for a specified time period.

5. The arrangement according to claim 4, wherein

when a wheel slip control system (DSC) is not activated during a wheel slip, a third fault detection program of the plausibility block of the second level of the electronic control unit is implemented, by which the fault is detected when, while the accelerator pedal (α

_FP=0) is not actuated or while an accelerator pedal angle is decreasing Δ

α

_FP/Δ

t<

0, an acceleration gradient (Δ

a<sub>n—

R</sub>/Δ

t) that is not determined from rotational wheel speeds is positive for a specified time period and, simultaneously, a vehicle acceleration gradient (Δ

a_Fzg/Δ

t) that is determined from the rotational wheel speeds is also positive.

6. The arrangement according to claim 5, wherein

a fourth fault detection program of the plausibility block of the second level of the electronic control unit is implemented, by which the fault is detected when a disproportionately high desired longitudinal acceleration (a_Fzg—

<sub>soll—

SW</sub>) is present for a specified constant accelerator pedal position (α

_FP).

7. A method of detecting faults in a motor vehicle equipped with an electronic control unit provided with a first function-controlling level and a second monitoring level of the electronic control unit, the method comprising acts of:

receiving, in both the first function-controlling level and the second monitoring level of the electronic control unit, at least an accelerator pedal position of the motor vehicle as an input signal;

determining, in the first function-controlling level of the electronic control unit, a quantity proportional to a desired longitudinal acceleration;

transmitting the determined quantity as an input signal to a plausibility block of the second monitoring level of the electronic control unit;

detecting, by a fault detection program of the plausibility block of the second monitoring level of the electronic control unit, a fault when a defined relationship is not satisfied between the accelerator pedal position and/or an accelerator pedal position change and the determined quantity,

when no fault is detected, the drive function is implemented, and

when a fault is detected, an emergency operation of the drive function is implemented by the electronic control unit, or the electronic control unit is switched off completely.

8. The method according to claim 7, further comprising an act of:

detecting, by a first fault detection program of the plausibility block of the second monitoring level of the electronic control unit, the fault when a defined desired longitudinal acceleration gradient dependent on the accelerator pedal position change is exceeded for a specified time period.

9. The method according to claim 8, wherein

the defined desired longitudinal acceleration gradient is limited by a maximal slope of a characteristic curve of an actual function of the first function-controlling level, by which, as a function of the accelerator pedal position, the desired longitudinal acceleration is specified.

10. The method according to claim 8, further comprising an act of:

when the accelerator pedal is not actuated, detecting the fault with a second fault detection program of the plausibility block of the second monitoring level of the electronic control unit when a defined desired longitudinal acceleration threshold value is exceeded for a specified time period.

11. The method according to claim 10, further comprising an act of:

when a wheel slip control system is not activated during a wheel slip, detecting, by a third fault detection program of the plausibility block of the second monitoring level of the electronic control unit, the fault while the accelerator pedal is not actuated or while an accelerator pedal angle is decreasing, when an acceleration gradient that is not determined from rotational wheel speeds is positive for a specified time period and, simultaneously, the desired longitudinal acceleration gradient that is determined from the rotational wheel speeds is positive.

12. The method according to claim 11, further comprising an act of:

detecting, by a fourth fault detection program of the plausibility block of the second monitoring level of the electronic control unit, the fault when a a specified longitudinal acceleration threshold value is exceeded for a specified constant accelerator pedal position.